Conflicting settings
You already know that GPOs get applied in order of the tiers at which they are linked, Local | Site | Domain | OU. Occasionally, GPOs linked at the different tiers could conflict with each other or contradict each other, and the last settings applied win. OU-linked policies will trump Domain-linked policies, Domain-linked beat out Site-linked, and so on.
A great resource for discovering these potential conflicts is the Group Policy Inheritance tab inside GPMC. This tab will show you all of the GPOs that are going to attempt to apply to the particular location you have selected, not only for the selected OU but for all tiers above it. For example, in the following screenshot, I have clicked on my Testing GPOs OU and can ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access